Weekly Report

周报生成器，自动汇总本周工作

Security Scan

The skill's code, files, and instructions are consistent with a local weekly-report generator that stores tasks and reports on disk; no network access or extra credentials are requested, but there are minor implementation issues and persistent local storage to be aware of.

Purpose & Capability

Name/description match the delivered code and SKILL.md: a local weekly report generator that reads/writes tasks.json and reports.json. The skill does not request unrelated credentials or external services. Minor inconsistency: the package includes Node code (index.js) but the skill metadata lists no required binaries — it implicitly requires a Node runtime to run the JavaScript.

Instruction Scope

SKILL.md and index.js stick to task/report management and help text. No instructions to read unrelated system files or to send data externally. Implementation bug: addTask uses lowerMessage but lowerMessage is defined only inside handle; this will cause runtime errors or incorrect behavior when adding/marking tasks. The SKILL.md references tasks.json and reports.json which the code creates and uses as documented.

Install Mechanism

No install spec (instruction-only). The bundle includes code and package.json but does not pull external packages or download code at install time. package.json lists no dependencies.

Credentials

The skill does not request environment variables, credentials, or config paths. All data access is local to the skill directory (tasks.json, reports.json), which is proportionate to the stated purpose.

Persistence & Privilege

The skill persistently writes and reads tasks.json and reports.json in its own directory, so user data will be stored on disk. always is false and it does not request elevated privileges or modify other skills' configurations.

Assessment

This skill appears to do what it says: manage simple tasks and generate a weekly report, storing data in tasks.json and reports.json in the skill folder. Before installing: 1) Be aware the skill persists data locally — don’t store sensitive secrets in tasks. 2) The code has a bug: addTask references lowerMessage but that variable is out of scope, which can break adding/marking tasks; ask the author to fix by passing the message or computing lowerMessage inside addTask. 3) Although no credentials or network calls are present, confirm your runtime will execute Node code (index.js). If you want to be extra cautious, inspect the files yourself or run the skill in a sandboxed environment.

weekly-report - 周报生成器

自动汇总本周工作，生成格式周报。

功能

1. 生成周报 - 自动汇总本周完成的任务
2. 本周总结 - 简洁的周报格式
3. 自定义模板 - 支持自定义周报格式

触发关键词

• 周报
• 总结
• 本周总结
• 生成周报

数据存储

• tasks.json - 任务列表
• reports.json - 历史周报

使用示例

• "生成周报"
• "本周总结"
• "周报"